Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e68999e3-4386-305a-a9ae-56e2186286d1.roa
File:                     e68999e3-4386-305a-a9ae-56e2186286d1.roa (raw, json)
Hash identifier:          Bg18tzIznafm+RQRbzWgStjR2Egemy0ooZEtF+9ugq8=
Subject key identifier:   F4:7D:44:93:7C:4D:E9:2D:9D:80:D5:19:F6:D9:2B:13:BD:C2:BC:08
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847A47136B2B053F26F948F8300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e68999e3-4386-305a-a9ae-56e2186286d1.roa
Signing time:             Thu 24 Oct 2024 01:00:32 +0000
ROA not before:           Thu 24 Oct 2024 01:00:32 +0000
ROA not after:            Wed 22 Jan 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        23.50.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:71:36:b2:b0:53:f2:6f:94:8f:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 24 01:00:32 2024 GMT
            Not After : Jan 22 02:00:32 2025 GMT
        Subject: CN=9d49597a-d731-49d1-87ff-8c75d1bd4341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:bd:25:4f:84:18:5f:5d:45:76:d7:af:86:
                    5e:18:21:70:cf:fe:29:2a:eb:d4:6b:3d:cb:e1:2b:
                    99:e6:73:0f:b0:51:b9:77:a4:31:dd:b3:0b:8a:e1:
                    f6:ee:34:5b:20:c3:ac:cd:7c:84:15:e5:83:b9:3f:
                    13:10:f0:fb:40:26:41:c6:01:ee:06:ff:0f:73:a7:
                    28:76:45:45:98:a6:7e:bb:9d:16:45:6e:d8:37:48:
                    67:57:a1:56:77:64:0d:6c:c7:4d:dd:a2:b8:f2:b5:
                    fa:80:7d:59:82:7c:29:f3:92:43:bd:46:a2:a2:83:
                    23:25:39:b2:56:57:a5:6c:50:69:b1:21:a0:56:06:
                    d2:55:31:28:9a:bf:14:d4:e1:5c:b9:d4:e7:c4:7a:
                    5d:e9:d2:cd:99:3d:84:ba:9f:9d:a9:16:28:01:4e:
                    03:f3:f6:d8:94:a0:6f:23:34:3e:71:02:57:bb:fb:
                    71:de:f2:04:60:ee:d6:9a:9f:c6:52:5c:5d:cb:d4:
                    65:63:a0:4f:6c:50:94:e2:ab:80:2e:52:3d:06:75:
                    34:ad:99:fc:cc:74:b7:c7:41:5f:f6:31:9c:ad:c8:
                    d5:3f:1b:85:fb:2d:33:fb:4d:b1:70:00:49:b2:dd:
                    72:7a:b8:ca:88:2a:68:2e:69:f4:29:0f:ef:89:dd:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7D:44:93:7C:4D:E9:2D:9D:80:D5:19:F6:D9:2B:13:BD:C2:BC:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e68999e3-4386-305a-a9ae-56e2186286d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.50.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:f4:59:7f:28:85:de:e4:3f:8b:c7:ce:16:8a:40:97:0c:4e:
         46:c7:92:51:ce:43:b0:95:3d:3d:1c:79:ca:83:46:77:59:21:
         7c:c6:64:c1:73:f6:bd:73:d5:01:3c:71:88:25:cd:4d:70:cf:
         68:ab:96:8b:f3:61:3f:0f:1f:a4:9f:49:3e:3d:ba:45:19:15:
         9a:37:a0:6e:00:97:bd:fc:f1:bd:3a:a5:53:8b:d5:56:cd:fc:
         a4:14:7e:24:9a:bd:22:82:46:38:eb:e0:8e:c6:fa:11:f8:d1:
         cb:cb:10:9f:60:82:25:eb:2a:27:10:68:5e:5e:27:e5:21:d9:
         0a:9a:e5:8e:62:93:2f:91:4e:1c:1e:a1:48:ef:c2:11:18:3e:
         d6:78:82:fe:05:88:d9:71:4d:10:5f:6a:07:c8:25:ff:f2:72:
         5a:f4:f2:cf:f1:e9:45:e9:3a:44:ed:e2:bf:c9:49:cc:20:bf:
         37:56:d7:ca:18:01:68:4d:42:ed:ee:e7:9d:da:79:cc:3f:98:
         29:c5:6b:a7:85:72:4f:b1:8a:29:ed:44:21:85:1c:4a:01:4f:
         f6:7f:a3:c4:63:da:bc:4c:81:97:5e:73:87:6d:f7:6a:5e:71:
         c6:99:39:64:dd:b1:90:e7:8e:77:fb:4e:62:29:b6:2e:bb:e7:
         90:6c:aa:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:50 2024 by rpki-client on console-fra.rpki-client.org